Privacy Policy

TegasFX Limited (trading name tegasFX) is the controller of the personal data described in this policy. This means that we decide why and how your personal data is processed.

• Company: TegasFX Limited, company number HT01224150.
• Address: P.B. 1257 Bonovo Road, Fomboni, Comoros.
• Email for privacy requests: support@tegasfx.com, with the subject "Privacy request".

In this policy, "tegasFX", "we", "us" and "our" mean TegasFX Limited. "You" means any person whose personal data we process, such as website visitors, prospective clients, clients, authorised persons of corporate clients and participants in our events and competitions.

This policy applies to personal data that we process through the following channels.

• Our website at www.tegasfx.com and all of its language versions.
• Our client area for registration, account opening and account management at account.tegasfx.com, and our dashboard at dash.tegasfx.com.
• The trading accounts and trading platforms we provide, including MetaTrader 5.
• Our apps for events and competitions we run, including games and prize draws.
• Our marketing emails and newsletters.
• Emails, calls, chats, meetings and other communication with us.

Some services, such as copy trading, PAMM and third-party trading tools, are provided together with other companies. Where those companies decide for themselves how to use your personal data, their own privacy policies also apply.

For each purpose below, we name the legal basis we rely on: the performance of a contract with you, a legal obligation, our legitimate interests, or your consent. Where we rely on consent, you can withdraw it at any time.

Website visitors

When you visit our website, our hosting provider processes technical data that every browser sends, such as your IP address, the address of the page you request, the date and time of the request, your browser type and language settings, and the page that referred you. We use this data to deliver the website, to keep it secure and stable, and to detect and block abuse. This is based on our legitimate interest in running a secure website.

The website also remembers your language and, if you arrived through a partner link, the partner reference contained in that link. Analytics only runs if you accept it in our cookie notice. Section 4 lists the cookies and similar technologies we use.

You do not create an account on this website. The website does not ask for identity documents or payment details. These are only collected in our client area.

Contact requests

When you use the contact form on our website, you send us your name, your email address, the topic you choose and your message, and, if you wish, your phone number and the name of your organisation. The form is delivered to our support team by email. The website itself does not store your message. Your IP address is also used for a short time to protect the form against automated abuse.

We use this information to answer your request and to keep a record of our correspondence. If your request concerns your account or opening an account, the legal basis is the performance of a contract or steps taken at your request before entering into a contract. Otherwise, it is our legitimate interest in answering enquiries.

Account opening and client relationship

When you register in our client area, open a trading account and use our services, we collect the following personal data.

• Identity data, such as your full name and any other names you use, date and place of birth, nationality, a photo identity document such as a passport or national identity card, and the results of identity checks.
• Contact data, such as your permanent address, proof of address, email address and phone numbers.
• Economic and financial profile, such as your profession or occupation, employer, income, source of funds and wealth, and your trading knowledge and experience.
• Screening data, such as whether you are a politically exposed person and the results of sanctions and other checks required by law.
• Account data, such as your account numbers, account type, login details, settings and the preferences you choose.
• Transaction and trading data, such as deposits, withdrawals, payment details, orders, positions, trading history and account statements.
• Technical data from the client area and trading platforms, such as IP address, device and browser information, login times and platform logs.
• Referral data, such as whether a partner or Introducing Broker referred you and the partner reference.

We collect this data from you and from your use of our services. Where needed, we also receive data from identity verification and screening providers, from banks and payment service providers, and from the partner or Introducing Broker who referred you.

If you open an account for a company or another legal entity, we also collect the data listed above about its directors, shareholders, beneficial owners and authorised persons, as described in our AML-KYC Policy.

We use this personal data for the following purposes.

• To register you, verify your identity and decide whether we can open an account for you. This is based on the performance of a contract, steps taken at your request before entering into a contract, and our legal obligations.
• To provide our services, such as executing orders, processing deposits and withdrawals, providing account statements and supporting you. This is based on the performance of our contract with you.
• To meet our legal and regulatory obligations, such as anti-money laundering and counter-terrorist financing checks, customer due diligence, sanctions screening, record keeping, reporting to authorities and tax obligations. This is based on our legal obligations.
• To manage risk, prevent fraud, market abuse and other misuse, enforce our terms, and keep accounts and systems secure. This is based on our legal obligations and our legitimate interest in protecting our clients and our business.
• To handle complaints, disputes and legal claims. This is based on our legitimate interest in establishing, exercising and defending legal claims.
• To improve our services and our clients' experience. This is based on our legitimate interest in developing our business.

If you do not provide the information we need for identity checks or to meet our legal obligations, we cannot open or continue your account.

Client area and dashboard

When you sign in to our client area or dashboard, we process your login data, information about your session and its security, such as your IP address and device information, and the actions you take, for example deposit and withdrawal requests or changes to your details. We use this data to provide the client area and dashboard, to keep your account secure and to detect suspicious activity. This is based on the performance of our contract with you and our legitimate interest in keeping accounts secure. The client area and dashboard use cookies that are needed to keep you signed in and to protect your account.

Marketing emails and newsletters

We send you marketing emails and newsletters only if you have given us your explicit consent, for example by ticking a box when you register in our client area, at an event or on a newsletter sign-up form.

For this purpose we process your name, email address and language, a record of when and how you gave your consent, and information about how you interact with our emails, such as whether an email was opened and which links were clicked. Our email service provider sends these emails and manages your preferences.

Marketing emails we send will include an unsubscribe link. You can also withdraw your consent at any time by contacting support@tegasfx.com. Withdrawing your consent is free of charge and does not affect processing that took place before the withdrawal. After you withdraw your consent, we keep your email address on a suppression list so that we do not send you marketing emails again by mistake.

Messages we need to send you as a client, for example about your account, security, changes to our terms or legal notices, are not marketing. We send them based on our contract with you or our legal obligations.

Events and competitions

When you take part in events and competitions we run, for example a game or a prize draw in our event app, we process your name, your email address and your game results and, if you win, the information needed to hand over your prize. We use this data to run the activity, to record results, to contact winners, to hand over prizes and to prevent manipulation. This is based on the participation terms you accept when you take part.

If you also sign up for our newsletter at an event, we use your email address for marketing only on the basis of that separate consent.

Communication and support

When you contact us by email, phone, chat, social media or in person, we process your contact details and the content of your communication to answer you and to support you. This is based on the performance of our contract with you or our legitimate interest in answering enquiries.

As described in our Client Service Agreement, we may record telephone conversations, chats and meetings with clients and use these recordings or transcripts as evidence of instructions and agreements. This is based on our legal obligations and our legitimate interest in documenting instructions and resolving disputes.

Cookies are small text files that a website stores in your browser. Similar technologies, such as the local storage of your browser, work in a comparable way. Our website uses the following cookies and similar technologies.

Set by our website

• NEXT_LOCALE: remembers the language you chose or the language version you visited, so that the website opens in that language next time. Stored for 12 months.
• tegas_referral_lid, tegas_referral_pid, tegas_referral_lid_client and tegas_referral_pid_client: store the partner reference from a partner link, which are the lid and pid values in the web address, so that the partner who referred you is credited when you register. Stored for 3 days and readable by our client area at account.tegasfx.com.
• tegasfx_cookie_consent: records that you accepted analytics. Set only if you select Accept in our cookie notice and stored for 6 months.
• tegasfx-cookie-consent in local storage: records whether you accepted or rejected analytics, so that we do not ask you again on every page. Kept until you clear the site data in your browser.
• tegasfx_session_cache in session storage: records whether you are signed in to our client area and, if you are, your first name and email address, so that our website can show your account in the navigation. Our website stops using it after 5 minutes, and your browser deletes it when you close the tab.

Analytics with your consent

If you select Accept in our cookie notice, our website loads Contentsquare, an analytics service. Contentsquare sets its own cookies and collects information about how you use our pages, such as the pages you view, clicks, scrolling and mouse movements, and information about your device and browser. We use this information to understand how visitors use our website and to improve it. This is based on your consent.

Contentsquare sets the following cookies on our domain.

• _cs_id: recognises your browser when you return to our website. Stored for 13 months.
• _cs_s: keeps track of the pages you view during a visit. Stored for 30 minutes.
• _cs_c: stores your consent status for Contentsquare. Stored for 13 months.
• _cs_t, _cs_same_site and _cs_root-domain: check whether your browser accepts cookies and find our main domain. Removed immediately.

If you select Reject or close the notice, Contentsquare is not loaded. To change your choice later, delete the cookies and site data for tegasfx.com in your browser settings. The cookie notice then appears again on your next visit.

Content from other providers

• Trustpilot: some pages show reviews from Trustpilot. When you scroll to such a section, your browser loads the Trustpilot widget from Trustpilot's servers. Trustpilot receives your IP address and browser information, may set its own cookies and processes this data under its own privacy policy.
• fxcopy.community: our copy trading page loads the list of strategy providers and their pictures directly from fxcopy.community, the provider of our copy trading service. Your browser therefore sends your IP address and browser information to this provider. If you follow a link to invest in a strategy, you continue on the provider's website.
• Cloudflare: as our hosting provider, Cloudflare may set cookies that are strictly necessary to protect the website. When it checks that a visitor is not an automated program, it sets cf_clearance, so that you are not checked again. Under Cloudflare's default setting, this cookie is stored for 30 minutes. Cloudflare's bot protection can also set __cf_bm, which expires after 30 minutes without activity.

Our website does not use advertising cookies or social media plugins.

You can block or delete cookies in your browser settings. If you block the cookies set by our website, the website still works, but it may not remember your language or credit the partner who referred you.

We share personal data only where this is needed for the purposes described in this policy.

Service providers

These providers process personal data on our behalf and under our instructions. We use the following categories of providers.

• Hosting and network providers: host and deliver our website, client area, dashboard and apps, protect them against bots and abuse, and limit excessive requests. They can process technical data such as IP addresses, browser and device information and request logs.
• Database and storage providers: store the data that our client area, dashboard and event app need, such as sign-in session data, which is kept for a limited period, counters of sign-in and registration attempts used to block abuse, dashboard settings and preferences, and the entries, results and marketing consents of our event games. They can process your name, email address, user ID, IP address, settings and event data.
• Back office and client management software: helps us manage our client relationships and provide our services. It can process the client data described in section 3, such as identity, contact, financial profile, account and transaction data.
• MetaTrader 5: is the trading platform on which your trading accounts run. It processes your account and trading data.
• Error and performance monitoring providers: help us find and fix faults and measure the speed and reliability of our services, including sign-in and registration in the client area. They can process technical data such as IP addresses, browser and device information and details of the error or event.
• Our email service provider for marketing emails: sends our marketing emails, only to people who have given their consent, and manages their email preferences. It can process your name, email address, language, consent record and information about how you interact with our emails.
• Email delivery providers: deliver contact form messages and service emails, such as prize notifications from our event games. They can process your name, email address and the content of the message.
• Analytics providers: analyse how visitors use our website, only if you accept analytics in our cookie notice. They can process information about how you use our pages and about your device and browser, as described in section 4.
• Providers of identity verification, payment processing and IT support: help us verify identities, process deposits and withdrawals and run our systems. They can process identity documents and the results of checks, payment details and other data needed for their task.

Other recipients

• Banks and payment service providers, to process your deposits and withdrawals.
• Partners and Introducing Brokers who referred you, with the information needed to attribute your account to them and to calculate their remuneration. Where an Introducing Broker works on our behalf, we may also share the information needed to complete due diligence and approve your account application, as set out in our Client Service Agreement.
• Providers of copy trading, PAMM and other services that you choose to use, with the information needed to provide that service.
• Other legal entities of tegasFX and agencies that work on our behalf to analyse client data for our sales and marketing, as set out in our Client Service Agreement.
• Regulators, supervisory authorities, tax authorities, law enforcement agencies, courts and other public bodies, where the law requires us to disclose information or where this is needed to establish, exercise or defend legal claims.
• Professional advisers, such as lawyers, auditors and accountants, where they need the data to advise us.
• A buyer or successor, if we sell or transfer all or part of our business, under the same protections as described in this policy.

We expect our service providers to protect personal data and to use it only for the services they provide to us. You can ask us which recipients have received your personal data, as described in section 9.

tegasFX is based in Comoros. Our service providers operate in several countries, including the United States, the United Kingdom and member states of the European Union, and our hosting providers deliver our website from data centres around the world, usually from one close to you. Your personal data may therefore be processed in countries whose data protection laws differ from the laws in your country.

Where we transfer personal data to a country that does not offer a level of protection equivalent to the law that applies to you, we use standard contractual clauses approved by the European Commission, the United Kingdom's International Data Transfer Agreement or Addendum, or another safeguard recognised by the applicable law. You can request a copy of these safeguards by writing to support@tegasfx.com.

We keep personal data only as long as we need it for the purposes described in this policy, and at least as long as the law requires.

• Client records, including identity documents, due diligence information, transaction records and correspondence: at least 7 years after the end of our business relationship or after the transaction, as described in our AML-KYC Policy, and longer where a legal claim, an investigation or a request from an authority requires it.
• Applications and registrations that are incomplete or do not lead to an account: as long as they may be relevant for contacting you about your application or registration, or for assessing a possible business relationship with you. You can ask us to erase them or object to their use at any time, as described in section 9.
• Contact requests outside a client relationship: as long as needed to answer your request and any follow-up questions, unless we must keep them for legal reasons.
• Marketing data: until you withdraw your consent. We then keep your email address on our suppression list.
• Event and game data: as long as needed to run the activity and hand over prizes. We delete or anonymise the data of participants who did not win and did not consent to marketing no later than 90 days after the end of the event, and the data of winners no later than 12 months after the end of the event. Data covered by a marketing consent is kept until you withdraw that consent.
• Recordings and transcripts of communication with clients: as part of the client records described above.
• Technical logs: for a short period needed for security and troubleshooting.
• Cookies and browser storage: for the periods listed in section 4.

We use technical and organisational measures appropriate to the risk to protect personal data against loss, misuse and unauthorised access, such as encrypted connections and access limited to staff and service providers who need the data for their tasks.

No method of transmission or storage is completely secure. Please keep your passwords secret and contact us immediately if you believe that someone else has accessed your account.

Whatever country you live in, you have the following rights regarding your personal data.

• Access: ask for a copy of the personal data we hold about you and for information about how we use it, including the recipients that have received it.
• Rectification: ask us to correct inaccurate data or to complete incomplete data.
• Erasure: ask us to delete your data. We may need to keep some data where the law requires it, for example the client records described in section 7.
• Restriction: ask us to limit how we use your data, for example while we check a correction you requested.
• Objection: object to processing based on our legitimate interests and, at any time, to the use of your data for direct marketing.
• Data portability: receive the data you provided to us in a structured, commonly used and machine-readable format, or ask us to send it to another organisation where this is technically possible.
• Withdrawal of consent: withdraw your consent at any time where we rely on it. This does not affect processing that took place before the withdrawal.

To exercise your rights, write to support@tegasfx.com. Exercising your rights is free of charge. We may ask you to confirm your identity before we act on your request. We respond within the time required by the law that applies to you, for example within one month under the GDPR and the UK GDPR, or within 30 days under Turkish law. Where the GDPR or the UK GDPR applies and a request is complex or we receive many requests, we may extend this period by up to two further months and will tell you why, but only where every law that applies to your request permits an extension. If one of them sets a shorter deadline, the shortest deadline applies. Where no law sets a time limit, we respond within one month.

Right to complain

If you are not satisfied with how we handle your personal data, you can complain to us at support@tegasfx.com, and we will try to resolve your concern. You also have the right to complain to the data protection authority in your country of residence, if there is one, for example the Information Commission (formerly the Information Commissioner's Office) in the United Kingdom.

Our services are only for adults aged 18 or over. This also applies to our games and prize draws.

We do not knowingly collect personal data from anyone under 18. If you believe that a minor has provided us with personal data, please contact us and we will delete it, unless the law requires us to keep it.

We may update this policy when our services or the law change. The date at the top of this policy shows when it was last updated.

Where the law requires it, we will inform you of significant changes before they take effect.